Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»Technology»AI is scaling faster than control and resilience (Page 4)
Technology

AI is scaling faster than control and resilience

June 4, 20265 Mins Read
A growth arrow graph icon on a virtual screen with upward arrows, against a green background with a blur effect.

Veeam Software has published new global research, the ‘Data and AI Trust Gap’ report. This exposes a ‘stark and widening gap at the heart of enterprise AI’ – while 88% of organizations are already using or piloting AI agents, only 7% qualify as truly AI-ready and 95% say data challenges have already slowed their AI progress. As agentic AI moves from pilots into production, organizations face an urgent challenge: ensuring that the data powering those systems is visible, governed, secure, and resilient.

The research, based on a global survey of 600 senior executives across financial services, healthcare, manufacturing, retail, and technology, shows that AI adoption is scaling dramatically faster than the governance structures designed to manage it. Despite strong executive investment and intent, the ability to control, monitor, and recover from AI failures is critically underdeveloped.

Key findings show AI is scaling faster than control:

  • Only seven% of organizations are truly AI-ready.
  • 88% are already using or piloting AI agents.
  • Only 28% are confident they can detect AI systems operating outside approved parameters.
  • 95% say data challenges have already slowed AI progress.

“Most organizations don’t have an AI adoption problem; they have an AI trust problem,” said Anand Eswaran, CEO of Veeam. “The first phase of AI was defined by infrastructure investment, experimentation, and acceleration. The next phase will be defined by trust. With the widespread adoption of autonomous AI agents operating at machine speed, the question transitions from whether you can use AI, to whether you can ensure all your data is secure, governed, compliant, and resilient. And should something go wrong, can you recover with precision? That’s how you accelerate safe AI at scale without accelerating reputational and operational risk.”

Executive confidence masks an operational reality gap

The research uncovers a significant perception gap between the boardroom and the operational teams responsible for delivering AI outcomes. Progress frequently stalls between intent and execution: governance exists inconsistently, data is managed reactively, and ownership is assigned but fragmented:

  • 65% of CEOs believe they have a full AI inventory, compared with just 48% of technical leaders.
  • 52% of CEOs believe they actively lead on data, but only 41% of CISOs and 38% of CIOs agree.
  • 48% of CEOs believe trusted, secure, and compliant data could unlock more than 25% revenue growth.
  • 83% of CEOs feel pressure to accelerate their AI and data capabilities.

This combination of rapid AI adoption, coupled with incomplete visibility and unclear accountability, creates the conditions for failures that are difficult to detect, explain, and contain.

When AI fails, it won’t look like downtime

As AI systems become more autonomous, the nature of failure is shifting. Risk is moving away from traditional system outages toward data-level failures that are harder to detect, explain, and contain. The research warns that machine-speed mistakes can outpace detection, forcing resilience to evolve from broad recovery to precision – restoring only what is impacted, rather than rewinding entire environments.

Among organizations running AI today, only a minority could identify within minutes:

  • Which systems it accessed (29%).
  • What actions it took (25%).
  • What decisions it influenced (24%).
  • Which data the system used (22%).

Only 40% of leaders are very confident they can isolate and precisely reverse an agentic AI failure.

Governance is converging on data

The governance challenge is converging on data from two directions: internal demand and external scrutiny.

Inside organizations, unauthorised AI use is now mainstream:

  • 95% report unauthorised AI use within their organization and 93% view it as a significant risk.
  • Yet only 25% offer approved alternatives, meaning most are trying to suppress demand rather than govern it effectively.
  • 44% say increased cyber risk is the top shadow AI risk.

At the same time, regulatory pressure outside the organization is intensifying. 61% of organizations say the EU AI Act has already influenced AI investment strategies in the last 12 months, while 47% cite maintaining audit trails for AI decisions as their biggest compliance concern.

Trust requires ownership, not shared ambiguity

The new research shows that the core barriers to progress are fragmented ownership and misaligned operating disciplines – with data, AI, and governance responsibilities often spread across teams in ways that dilute accountability and slow execution. When ‘everyone owns it’, no one can decisively set policy, enforce controls, or prove outcomes.

Where ownership is clearly defined, outcomes improve significantly:

  • 24% more likely to detect rogue AI behaviour in organizations where CISOs own AI agent risk.
  • 47% less likely to detect rogue AI behaviour in organizations relying on shared ownership.

Data doesn’t need another champion – it needs accountable leadership strong enough to align governance, security, privacy, compliance, and resilience.

A clear divide is emerging between organizations that can operationalise trust and those that cannot. Organizations that successfully align ambition, visibility, and governance significantly outperform their peers.

Among organizations classified as fully AI-ready, 97% report measurable business benefits from data and AI investments, compared with 48% overall, demonstrating the value of operationalising trust at enterprise scale.

Obtain the report
Asia Pacific Europe North America UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleNew benchmark report shows what separates reactive security programmes from resilient ones
Next Article Geopolitical risk in the supply chain – from disruption management to strategic

Related Posts

An exploding digital padlock illustrates the requirement for post-quantum cryptography.

Research breakthrough brings reliable quantum computers and Q-day closer to reality

September 10, 2026
A danger sign on a digital background.

New blob URL phishing technique evades detection by using legitimate Microsoft services

September 10, 2026
AI risks

Unmanaged AI workflows expose EMEA organizations to rising compliance and data risks

September 9, 2026
City skyline at sunset with bright light trails and a translucent blue smart-city grid overlay and GPS pins indicating locations.

AI world models: future possibilities for organizational resilience?

September 7, 2026
DRJ and BCI logos

DRJ and BCI publish guidance for governing, managing, and using AI in resilience

September 7, 2026
Decision making with over whelming information.

AI can find the vulnerability. Accountability still sits with your crisis leadership

September 7, 2026
Advertisement
Resilience First
This week's most read articles
Under pressure: An egg cracking under pressure applied by squeezing clamps form the sides.

Managing scenario testing for operational resilience

May 16, 2024
COSO logo

New COSO ERM guidance aims to help organizations with practical implementation

May 12, 2026
Close-up of a green-brown iris peering through a jagged tear in dark paper or wall material.

The blind spots in business continuity

September 2, 2026
Latest resources
A woman with blonde hair and a ponytail looking at colourful sticky notes on a wall.

The stories behind the organization: how cultural narratives shape resilience

August 7, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
A futuristic red warning alert icon with glowing exclamation mark.

Cloud Security Alliance publishes Hugging Face Incident Initial Post-Mortem

A person hold a building door open for a person behind who is tailgating to get unauthorised access.

Security Culture: A Strategic Capability That Builds Resilience in a Volatile World

An identity icon with a map marker on it, indicating the concept of identity as a target for attackers. The icon is on a generic IT background predominantly in black and orange.

Identity-based approaches dominate initial access for ransomware attacks

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?